pentest-cloud-infrastructure
Cloud security posture management and container security assessment for AWS, Azure, GCP, and Kubernetes.
Skill by jd-opensource
Install
Works with Claude Code, Claude apps, Codex, Cursor, Gemini CLI, GitHub Copilot, VS Code, OpenCode, Goose, Windsurf. Read the repository before you give any tool access to your data.
npx agentmarket install skill/jd-opensource-pentest-cloud-infrastructure
Asks which of your tools to add it to (Claude Code, Codex, Cursor, VS Code, Windsurf, Gemini CLI, Claude Desktop) and shows the change first. See https://agentmart.dev/cli.
Get the weekly diff
The weekly diff: one email a week with new agent tools, notable updates and grade changes, plus security alerts for tools you follow. Double opt-in, one-click unsubscribe.
About
Use cases: devops, cloud, security
Reviews
Write a reviewNo reviews yet. Installed it? Reviews come from verified installers only. How reviews work
Permissions
What this skill can do and what it asks for, from its SKILL.md. Checked Oct 25, 2026.
- Tools
- No tools found
- Secrets
- None asked for
- Install scripts
- None found
Network hosts it talks to 1
codeload.github.com· found in install command
Files it touches
~/.claude/skills/pentest-cloud-infrastructure
What's inside
- Skill name
pentest-cloud-infrastructure- Description
- Cloud security posture management and container security assessment for AWS, Azure, GCP, and Kubernetes.
- License
- Apache-2.0
- Instructions
- 17 lines in SKILL.md · view on GitHub
Files (3)
- SKILL.md
- tools.md · references/
- workflows.md · references/
SKILL.md (first lines)
# Pentest Cloud Infrastructure ## Purpose Assess the security configuration of cloud environments and containerized infrastructure to detect misconfigurations, excessive permissions, and vulnerabilities. ## Core Workflow 1. **Cloud Config Audit**: Assess cloud provider configuration (AWS/Azure/GCP) using `prowler` and `scoutsuite`. 2. **IaC Scanning**: Analyze Infrastructure-as-Code (Terraform, CloudFormation) for security flaws using `checkov` and `terrascan`. 3. **Container Security**: Scan container images and runtime environments using `trivy`, `clair`, and `dockle`. 4. **Kubernetes Assessment**: Audit K8s clusters for CIS compliance and vulnerabilities using `kube-bench` and `kube-hunter`. 5. **Runtime Monitoring**: Analyze runtime behavior and rule violations using `falco`. ## References - `references/tools.md` - `references/workflows.md`
From jd-opensource/JoySafeter, Apache-2.0.
More from jd-opensource/JoySafeter
- 0.697score
pentest-whitebox-code-review
jd-opensource
Source code security audit using backward taint analysis, slot type classification, render context verification, and 3-phase parallel review producing an…
SkillCFreshness: C★ 315Claude Code +9 - 0.697score
pentest-recon-attack-surface
jd-opensource
White-box attack surface mapping — correlate external scans, browser exploration, and source code into structured endpoint inventory, role architecture, and…
SkillCFreshness: C★ 315Claude Code +9 - 0.697score
pentest-secrets-exposure
jd-opensource
Discover hardcoded credentials, leaked API keys, exposed configuration files, sensitive data in artifacts, and information disclosure via error handling.
SkillCFreshness: C★ 315Claude Code +9 - 0.697score
pentest-supply-chain
jd-opensource
Software supply chain security — dependency confusion, CI/CD pipeline attacks, lockfile integrity, and build artifact verification.
SkillCFreshness: C★ 315Claude Code +9 - 0.697score
pentest-mobile-app
jd-opensource
OWASP Mobile Top 10 security testing for Android and iOS — local storage, certificate pinning bypass, IPC abuse, and binary protections.
SkillCFreshness: C★ 315Claude Code +9 - 0.697score
pentest-api-deep
jd-opensource
Deep OWASP API Security Top 10 testing for REST, GraphQL, gRPC, and WebSocket APIs — BFLA, mass assignment, rate limiting, and unsafe consumption.
SkillCFreshness: C★ 315Claude Code +9 - 0.697score
pentest-business-logic
jd-opensource
Business logic vulnerability testing — workflow bypass, payment manipulation, state machine abuse, and function limit circumvention per WSTG-BUSL.
SkillCFreshness: C★ 315Claude Code +9 - 0.697score
pentest-client-advanced
jd-opensource
Advanced client-side attacks — CORS misconfiguration, WebSocket security, clickjacking, postMessage abuse, CSS injection, and browser storage vulnerabilities.
SkillCFreshness: C★ 315Claude Code +9 - 0.697score
pentest-config-hardening
jd-opensource
Security header auditing, TLS configuration testing, HTTP method analysis, CSP bypass assessment, and deployment hardening verification.
SkillCFreshness: C★ 315Claude Code +9 - 0.697score
pentest-exploit-validation
jd-opensource
Proof-driven exploitation with 4-level evidence system, bypass exhaustion protocol, mandatory evidence checklists, and strict…
SkillCFreshness: C★ 315Claude Code +9 - 0.697score
pentest-ai-llm-security
jd-opensource
AI/LLM application security testing — prompt injection, jailbreaking, data exfiltration, and insecure output handling per OWASP LLM Top 10.
SkillCFreshness: C★ 315Claude Code +9 - 0.696score
planning-with-files
jd-opensource
Implements Manus-style file-based planning for complex tasks.
SkillCFreshness: C★ 315Claude Code +9
Signals
- Stars
- 315
- Forks
- 56
- Open issues
- 17
- Last commit (this folder)
- Feb 11, 2026 (8 months ago)
- Last release
- Jul 2, 2026 (3 months ago)
From GitHub (fetched Oct 24, 2026).
Details
- License
- Apache-2.0
- Repository
- github.com/jd-opensource/JoySafeter
- First seen
- Oct 24, 2026
- Last checked
- Oct 24, 2026
- Source
- GitHubgithub-graphql
More from jd-opensource
- 0.697score
pentest-config-hardening
jd-opensource
Security header auditing, TLS configuration testing, HTTP method analysis, CSP bypass assessment, and deployment hardening verification.
SkillCFreshness: C★ 315Claude Code +9 - 0.697score
pentest-business-logic
jd-opensource
Business logic vulnerability testing — workflow bypass, payment manipulation, state machine abuse, and function limit circumvention per WSTG-BUSL.
SkillCFreshness: C★ 315Claude Code +9 - 0.697score
pentest-client-advanced
jd-opensource
Advanced client-side attacks — CORS misconfiguration, WebSocket security, clickjacking, postMessage abuse, CSS injection, and browser storage vulnerabilities.
SkillCFreshness: C★ 315Claude Code +9 - 0.697score
pentest-ai-llm-security
jd-opensource
AI/LLM application security testing — prompt injection, jailbreaking, data exfiltration, and insecure output handling per OWASP LLM Top 10.
SkillCFreshness: C★ 315Claude Code +9 - 0.697score
pentest-api-deep
jd-opensource
Deep OWASP API Security Top 10 testing for REST, GraphQL, gRPC, and WebSocket APIs — BFLA, mass assignment, rate limiting, and unsafe consumption.
SkillCFreshness: C★ 315Claude Code +9 - 0.697score
pentest-exploit-validation
jd-opensource
Proof-driven exploitation with 4-level evidence system, bypass exhaustion protocol, mandatory evidence checklists, and strict…
SkillCFreshness: C★ 315Claude Code +9
Cite this page
pentest-cloud-infrastructure skill. Agent Mart. https://agentmart.dev/skills/jd-opensource-pentest-cloud-infrastructure (last updated 2026-10-24)